Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-9342 · ADVISORY
• eclipse-ee4j/glassfish · PACKAGE
• gitlab.eclipse.org/security/cve-assignement/-/issues/33 · WEB
• gitlab.eclipse.org/security/vulnerability-reports/-/issues/231 · WEB

Lỗ hổng khác của org.glassfish.main.admingui:console-common

• CVE-2026-2586NGHIÊM TRỌNG 9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the p…
• CVE-2024-9408NGHIÊM TRỌNG 9.8In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.
• CVE-2024-9343TRUNG BÌNH 6.1In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.
• CVE-2024-10031TRUNG BÌNH 5.4In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the un…
• CVE-2024-10029TRUNG BÌNH 6.1In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console.